AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-04-25 · Documentation low

File: cli/latest/reference/opensearch/create-domain.md

Summary

Added new parameters for IAM Identity Center configuration and software update options during blue/green deployments

Security assessment

Added two new configuration parameters: 1) IdentityCenterInstanceRegion for specifying the region of IAM Identity Center instance, and 2) UseLatestServiceSoftwareForBlueGreen to automatically use latest service software during blue/green deployments. These are feature enhancements, not security fixes. The IAM Identity Center parameter improves identity management configuration but doesn't address a specific security vulnerability. The software update parameter helps ensure latest software is used but isn't documented as a security fix.

Diff

diff --git a/cli/latest/reference/opensearch/create-domain.md b/cli/latest/reference/opensearch/create-domain.md
index 58d3ce4ac..69200efd0 100644
--- a//cli/latest/reference/opensearch/create-domain.md
+++ b//cli/latest/reference/opensearch/create-domain.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.34 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.37 Command Reference](../../index.html) »
@@ -1270,0 +1271,12 @@ JSON Syntax:
+> 
+> IdentityCenterInstanceRegion -> (string)
+>
+>> The Region of the IAM Identity Center instance.
+>> 
+>> Constraints:
+>> 
+>>   * min: `5`
+>>   * max: `30`
+>>   * pattern: `[a-z][a-z0-9\-]+`
+>> 
+
@@ -1298 +1310 @@ Shorthand Syntax:
-    EnabledAPIAccess=boolean,IdentityCenterInstanceARN=string,SubjectKey=string,RolesKey=string
+    EnabledAPIAccess=boolean,IdentityCenterInstanceARN=string,IdentityCenterInstanceRegion=string,SubjectKey=string,RolesKey=string
@@ -1306,0 +1319 @@ JSON Syntax:
+      "IdentityCenterInstanceRegion": "string",
@@ -1518,0 +1532,4 @@ JSON Syntax:
+> 
+> UseLatestServiceSoftwareForBlueGreen -> (boolean)
+>
+>> Whether the domain should use the latest service software version during a blue/green deployment. If enabled, the domain will automatically use the latest available service software when a blue/green deployment is triggered.
@@ -1523 +1540 @@ Shorthand Syntax:
-    AutoSoftwareUpdateEnabled=boolean
+    AutoSoftwareUpdateEnabled=boolean,UseLatestServiceSoftwareForBlueGreen=boolean
@@ -1530 +1547,2 @@ JSON Syntax:
-      "AutoSoftwareUpdateEnabled": true|false
+      "AutoSoftwareUpdateEnabled": true|false,
+      "UseLatestServiceSoftwareForBlueGreen": true|false
@@ -2709,0 +2728,12 @@ DomainStatus -> (structure)
+>> 
+>> IdentityCenterInstanceRegion -> (string)
+>>
+>>> The Region of the IAM Identity Center instance.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `5`
+>>>   * max: `30`
+>>>   * pattern: `[a-z][a-z0-9\-]+`
+>>> 
+
@@ -2897,0 +2928,4 @@ DomainStatus -> (structure)
+>> 
+>> UseLatestServiceSoftwareForBlueGreen -> (boolean)
+>>
+>>> Whether the domain should use the latest service software version during a blue/green deployment. If enabled, the domain will automatically use the latest available service software when a blue/green deployment is triggered.
@@ -3027 +3061 @@ DomainStatus -> (structure)
-  * [AWS CLI 2.34.34 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.37 Command Reference](../../index.html) »